Security Advisory

CVE-2019-14767

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-21 15:34:55

Last updated 2024-08-05 00:26:38

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (document=../) allows an unauthenticated user to download arbitrary files from the server.

← Browse all CVEs View on cve.org ↗